The license, README, matching repository, and build/security tooling improve transparency. The tiny release history and single-contributor activity leave limited evidence of durable maintenance, while workflow hygiene adds avoidable supply-chain exposure.
57%
Total Score
67
100
88
50
All four releases appeared within about 24 minutes, and the package is only 54 days old. This provides limited evidence of an established maintenance cadence.
One contributor made all four recent commits, concentrating maintenance knowledge in a single person. Organization ownership provides some handoff capacity, but no second active contributor is shown.
The repository had four commits in the last three months, all within the measured activity window. The amount of activity is modest and does not yet demonstrate durable maintenance.
No repository security policy was found, reducing transparency for reporting and handling vulnerabilities, although Semgrep scanning provides partial compensation.
Version v0.0.4 is not a prerelease, but the 0.x version indicates an immature API and limited demonstrated stability.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
mezzio/mezzio-router Version ^3.0 || ^4.0 | — | — |
mezzio/mezzio-template Version ^2.0 || ^3.0 | — | — |
laminas/laminas-diactoros Version 3.8.0 | — | — |
psr/http-server-middleware Version ^1.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.